Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File:                     vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier:          /68Mzk3vceSStvOMPjX8K00MFxBFf2TlWn0QD+rjDsY=
Subject key identifier:   13:7F:64:72:2D:C1:3E:A9:2A:13:34:12:EF:FF:A2:0C:45:D8:2B:E1
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer:       /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial:       0199FDA1CDE66F76D6A6EA07F3CD195F93A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number:          1255
Signing time:             Sun 19 Oct 2025 18:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 18:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 18:01:03 +0000
Files and hashes:         1: 0Om0y2WJnxnezCkTIkUnB1aduws.roa (hash: /h/ZFV7Tyfw4gvX/rM0qUi+sUrGWiAq4SLLKFNedki0=)
                          2: 1-AkEgtFYAeYpvfsAvZdlJuyuVF4.roa (hash: bj7r1qBjXXo6AEdGvTw884ILliGHjEYqfvi7PxgbBxU=)
                          3: 18s6iv28JzN23ACcxvidnV4O018.roa (hash: E520J/m/9e2VHqsrljvZsuWV/dovmSdu9Qn56B7khEk=)
                          4: 7HaXNFSYGxOw3R9L6I0z6V-mXb4.roa (hash: iLQ9KNTQ4u3M1tfa+YEpVxilam6XMDqybBUGCnTqiss=)
                          5: 8GAUp0koq7cLyKDBljD12_gS9fU.roa (hash: TLK0INhWOPZtOAAlZEJ0okbttAxXwilC0/Fin663h4o=)
                          6: 8ezldgsZjdYUFJex6k0Ut1HMEC4.roa (hash: bDkmxhsgqaahY46AsODPGEATa+7WHhbve+WtDMm08R4=)
                          7: A36TtvXMPQL0vuYt-DbADXkioHg.roa (hash: gr5xlNyjdy6ao9YoMSyHuCoI8p4LyFouICazI8UxNgw=)
                          8: EDQ-Yk7isf9sH4FXPQShWflCgog.roa (hash: SaxlXz/G0eyL2HVakqjpN328ugQ4obe8PUCDuMchTeo=)
                          9: N9DT59un9kPPAqydx65unLzNI5M.roa (hash: DR7WQ6lKKlByvf06hUpXgwGsB6j3cg+izla7y1IjfTk=)
                          10: Quc7mdnkYNwrbQhv4ZNnMA-i26Q.roa (hash: qyyVqEo1X6QuUJgPIcFasQ0Ni+mghhtNAyF4nptRM7w=)
                          11: TPMoZhT7pBe3VYwD0yOkrDwG6DI.roa (hash: OH5WytZuz33ouqi8MQK3P99lvzQJRdnWAM/P6DB5FRw=)
                          12: b7dBieR_P9kmLnGcxW0fyaZjeow.roa (hash: 7CjlHKhuVQvksqqfXKK92KNHJPTf/pbKa2kMAV8YPNg=)
                          13: c-Wnlh-kFjP6q7EkrDX-duWttJc.roa (hash: 6Prgxqh9/nVNm4A4c9/ay2pcayT5Dd+P1lar2QOL0DQ=)
                          14: hVFH86LVYnyePIbmaCqfpS5vJKM.roa (hash: Jp2Ho2sVrxwbPVnhT98cuAw+l3HPTfx4q1sSUogMvrs=)
                          15: iL4hRCpLyAzkS7iRbK0kB-K-W-4.roa (hash: ZPL3tMdQLbuvPkq9q+UlEUarVrYcyMhTXlq7N8fBMNw=)
                          16: kPQEqnQ2tyC7d6-aTILssWet_yM.roa (hash: 1lTdkFvpUx4+IWByR4mFr+hq9dYheTg8typs5YnbW5g=)
                          17: pVgxUhCc7dPqvhiu0OhGRnn06X4.roa (hash: H5Zdm7znexs+7FCW+NTfkFJPDw3F/Gamb5QXizhY9Tk=)
                          18: tBvdEHK96-8IqXDimpyAd6-FvfI.roa (hash: kV3wVJLyHXbFkaWXeqnUNYEgcOQg7ySmIasAR3i9gU0=)
                          19: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: tlM/p7HtzoHWsRbowAEiS5PW9EEKcZF9v5iIzP9VQh8=)
                          20: vyDPsQ1FXw7OXoebjCdEso67fJc.roa (hash: 40KxbJ4OGjtphO16wDERCKtpdBirvp5LYlDflcERj1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:a1:cd:e6:6f:76:d6:a6:ea:07:f3:cd:19:5f:93:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
        Validity
            Not Before: Oct 19 18:01:03 2025 GMT
            Not After : Oct 20 18:01:03 2025 GMT
        Subject: CN=137f64722dc13ea92a133412efffa20c45d82be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:af:c7:22:b5:59:dc:37:cb:0e:1b:2a:8b:81:
                    ff:00:eb:62:fd:45:8a:1d:ed:d6:a2:bb:7a:03:a8:
                    c9:10:00:c2:73:df:e7:8c:26:2b:eb:26:bc:d1:5e:
                    1a:c1:c4:d4:e7:9e:cb:30:8c:63:60:df:6a:0d:8e:
                    af:03:bd:c3:94:d6:ca:5d:28:6c:4b:19:24:18:2a:
                    78:25:15:54:b2:b9:a0:d0:38:83:17:02:67:a8:14:
                    b7:cc:f4:b3:71:21:ee:61:86:c7:f7:10:9b:44:42:
                    e1:7f:19:9d:51:0c:5d:6b:9f:72:a1:72:3d:ca:a2:
                    93:4c:9f:22:76:e6:33:9b:8b:c8:9e:ae:ed:53:a9:
                    5d:a2:ec:e4:41:7e:51:90:c0:15:97:14:08:06:5f:
                    bc:58:88:f1:67:31:7c:6a:99:dd:ec:a0:92:4b:af:
                    68:22:ba:dd:2f:14:63:c4:d3:c1:6e:29:23:56:5b:
                    b5:ac:91:5e:b4:3a:8f:e6:f6:d5:a1:1d:b2:a3:1b:
                    c6:9f:82:36:dd:2e:fb:1c:56:21:f4:2d:f2:6a:6c:
                    fa:7d:a9:d0:c4:09:4d:dd:fb:14:33:fb:62:12:70:
                    52:4c:8c:b4:c1:81:d2:23:af:e8:4a:b0:ee:1a:57:
                    ef:dc:0c:fe:a2:89:f1:ef:45:88:25:a5:19:99:88:
                    77:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:7F:64:72:2D:C1:3E:A9:2A:13:34:12:EF:FF:A2:0C:45:D8:2B:E1
            X509v3 Authority Key Identifier:
                keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ea:a0:18:8e:a5:f8:11:3f:d6:0a:f1:fe:ef:4d:b4:e7:09:
         79:a2:95:b7:9d:6b:30:da:d1:b6:be:31:75:a3:53:0c:29:7f:
         1a:06:bc:c3:d4:22:5a:15:b7:bf:ab:14:8f:ec:b1:93:be:22:
         c7:9b:85:23:ce:85:17:e0:41:f2:f4:75:77:9c:f5:76:29:bf:
         3a:7c:54:05:cd:94:d1:7a:78:9e:c9:bd:b5:39:bd:a6:63:7f:
         17:6c:9f:e2:d6:8a:b5:01:d1:c1:c3:c0:4b:f6:dc:d9:49:fa:
         66:91:89:6d:ce:c3:5d:1b:a4:4f:9c:ea:7b:a5:93:46:ec:42:
         d6:ca:76:02:ae:52:b0:37:ac:de:00:08:c6:eb:bb:88:b7:31:
         c4:a7:6b:d0:51:90:5b:43:c6:29:f2:d6:91:ba:72:67:de:f2:
         ff:34:58:76:32:f5:c8:b0:43:d0:a7:75:23:ce:1c:d1:09:61:
         a7:50:0f:91:5e:63:9f:7c:fc:ec:3b:a6:39:b1:db:f5:45:15:
         81:4f:25:11:8e:28:65:fc:41:41:de:4b:57:86:3a:9a:07:8f:
         1b:3b:c2:15:e9:e6:08:a7:3d:eb:6d:11:68:91:8c:1e:3a:e3:
         3a:f2:4d:21:6b:21:93:3c:72:dd:90:da:24:9f:89:8a:77:7e:
         e9:3c:05:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:01:46 2025 by rpki-client